Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From promotions@zlima.win  Fri Jan 12 16:46:00 2018
Return-Path: <promotions@zlima.win>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id DF3901C881BBB; Fri, 12 Jan 2018 16:46:00 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Fri, 12 Jan 2018 16:46:00 +0100
From: "Sven Hegel" <admin@zlima.win>
To: info@ift-informatik.de
Subject: *****SPAM***** Deine Notfall-Benachrichtigung
Date: Fri, 12 Jan 2018 05:19:39 +0000
Message-Id: <95573da18748abc899c67468944f33a9@zlima.win>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.3 required=5.0 tests=BAYES_00,DATE_IN_PAST_06_12,
	DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_ONLY_24,HTML_MESSAGE,
	RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A58D838.29927511"

This is a multi-part message in MIME format.

------------=_5A58D838.29927511
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Your email client cannot read this email. To view it online,
   please go here: http://zlima.win/iem1/display.php?M=2832110&C=19eeb88872428a47422ac7c56aeaa504&S=103&L=5&N=59
   Hallo, Ich muss mich kurz fassen, da uns ein großer Tag bevorsteht. [...]
   

Content analysis details:   (5.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: ift-informatik.de]
 1.5 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 1.6 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
-0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                            domain
-0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5A58D838.29927511
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from srv19.australianwinner.online (unknown [45.123.197.140])
	by ift-informatik.de (Postfix) with ESMTP id C104D1C881B93
	for <info@ift-informatik.de>; Fri, 12 Jan 2018 16:45:58 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=zlima.win;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@zlima.win;
 bh=alsWebMH8Ftd9/2utMQ7hYCDJPc=;
 b=gs4uknq4k1raigSbAUUr24WSYDojWUiADrknMwOLAXSDTl+0e99Et9FG+JnaRX+1VC0EkGvcCyA2
   zrxKa6X2LDxpTdXfmW2xVrLlJLr7xDnNlPKf8iDqdDlob3cm0Oc9VzWPWM7c9qOCt03R830m9CxB
   9/iUzBC+5d/3DB71Qbo=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=zlima.win;
 b=G7jFMj2nNAXetaVOtM8DSEgTogeTBSIRTJXGSt8fw4x+CqJ7I5pnKRUWbOhkqiRabj9ztLH7j3kr
   RRDttcX+dVcrMdUtlyciENGpjgB4uNeg8/J/hee0VzIon22wfcBPyPqP/Qyl09R4SRU3DBcfqEDW
   5/iglEwyxxCNS9WHSyY=;
Received: from mail.zopishow.xyz (198.175.127.112) by srv19.australianwinner.online id hb3c3c0001gb for <info@ift-informatik.de>; Fri, 12 Jan 2018 15:45:56 +0000 (envelope-from <promotions@zlima.win>)
Received: from zlima.win (127.0.0.1) by mail.zopishow.xyz id hb3bo60001gt for <info@ift-informatik.de>; Fri, 12 Jan 2018 15:42:59 +0000 (envelope-from <promotions@zlima.win>)
To: info@ift-informatik.de
Subject: Deine Notfall-Benachrichtigung
Message-ID: <95573da18748abc899c67468944f33a9@zlima.win>
Date: Fri, 12 Jan 2018 05:19:39 +0000
From: "Sven Hegel" <admin@zlima.win>
Reply-To: promotion@zlima.win
MIME-Version: 1.0
X-Mailer-LID: 5
List-Unsubscribe: <http://zlima.win/iem1/unsubscribe.php?M=2832110&C=19eeb88872428a47422ac7c56aeaa504&L=5&N=103>
X-Mailer-RecptId: 2832110
X-Mailer-SID: 103
X-Mailer-Sent-By: 2
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_d804d9e06c6625391d41658f7d55d647"
Content-Transfer-Encoding: 8bit

--b1_d804d9e06c6625391d41658f7d55d647
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Your email client cannot read this email.
To view it online, please go here:
http://zlima.win/iem1/display.php?M=2832110&C=19eeb88872428a47422ac7c56aeaa504&S=103&L=5&N=59
Hallo,

Ich muss mich kurz fassen, da uns ein
großer Tag bevorsteht.

In wenigen Stunden steht die nächste,
große Freischaltung an und ich wollte
sichergehen, dass Du dabei bist, bevor
wir loslegen.

Klicke einfach hier, um jetzt zu starten.

http://zlima.win/iem1/link.php?M=2832110&N=103&L=65&F=T
Vergewissere Dich, dass Du dies
unverzüglichst machst, nachdem Du
diese Nachricht geöffnet hast, um
sicherzugehen, dass Du dabei bist…

Danke und bis bald,

Sven Hegel

To stop receiving these
emails:http://zlima.win/iem1/unsubscribe.php?M=2832110&C=19eeb88872428a47422ac7c56aeaa504&L=5&N=103

--b1_d804d9e06c6625391d41658f7d55d647
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

<html><head></head><body><font face="arial, helvetica, sans-serif"
size="2">Hallo,<br /></font><font face="arial, helvetica, sans-serif"
size="2"><br /></font><font face="arial, helvetica, sans-serif"
size="2">Ich muss mich kurz fassen, da uns ein<br />gro&szlig;er Tag
bevorsteht.<br /></font><font face="arial, helvetica, sans-serif"
size="2"><br /></font><font face="arial, helvetica, sans-serif" size="2">In
wenigen Stunden steht die n&auml;chste,&nbsp;<br />gro&szlig;e
Freischaltung an und ich wollte&nbsp;<br />sichergehen, dass Du dabei bist,
bevor<br />wir loslegen.<br /></font><font face="arial, helvetica,
sans-serif" size="2"><a
href="http://zlima.win/iem1/link.php?M=2832110&N=103&L=65&F=H"><br
/></a></font><font face="arial, helvetica, sans-serif" size="2"><a
href="http://zlima.win/iem1/link.php?M=2832110&N=103&L=65&F=H">Klicke
einfach hier, um jetzt zu starten.</a><br /></font><font face="arial,
helvetica, sans-serif" size="2"><br /></font><font face="arial, helvetica,
sans-serif" size="2">Vergewissere Dich, dass Du dies&nbsp;<br
/>unverz&uuml;glichst machst, nachdem Du&nbsp;<br />diese Nachricht
ge&ouml;ffnet hast, um<br />sicherzugehen, dass Du dabei bist&hellip;<br
/></font><font face="arial, helvetica, sans-serif" size="2"><br
/></font><font face="arial, helvetica, sans-serif" size="2">Danke und bis
bald,<br /></font><font face="arial, helvetica, sans-serif" size="2"><br
/></font><font face="arial, helvetica, sans-serif" size="2">Sven Hegel<br
/><br style="color: #222222; font-family: Arial, Helvetica, sans-serif;
font-size: 12.8px;" /><br style="color: #333333; font-family: arial,
helvetica, sans-serif; font-size: medium; background-color: #f9f9f9;"
/><font size="1" style="color: #333333; font-family: arial, helvetica,
sans-serif; background-color: #f9f9f9;">Diese Nachricht ist bestimmt
f&uuml;r : info@ift-informatik.de<br />Falls Sie diese E-Mails nicht mehr
erhalten m&ouml;chten,&nbsp;<a
href="http://zlima.win/iem1/unsubscribe.php?M=2832110&C=19eeb88872428a47422ac7c56aeaa504&L=5&N=103">klicken
Sie hier</a>, um sich abzumelden</font></font><br/>	<br>
<img
src="http://zlima.win/iem1/open.php?M=2832110&L=5&N=103&F=H&image=.jpg"
height="1" width="10"></body></html>

--b1_d804d9e06c6625391d41658f7d55d647--



------------=_5A58D838.29927511--